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76 



S If Authority - R/W Access Rights 
SPName 
SPPasscode 
SPPublicKey Pair Out 
SPPublicKey Pair In 
iSPSymmetric Key 

Writebhce Write 0\«r | WriteAny 
ReadCur | ReadAny | Hidden Read 
Start, End Time, Erase at End 
SP DataEncrypt YES | NO 
SPData Start, Record Size, and Number 
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Field 


N Bit Size 


Byte Size 


Note 


Internal 


External 


Root 


SPName 


1 256 


32 


First Byte 


InFrom Set 


InFrom Set 


InFrom Set 


SPPasscode 


1 128 


16 


Null 


InFrom CSet, 


InFrom CSet, 


InFrom CSet, 










Hidden 


Hidden 


Hidden 


SPPublicKey-Out 


1 4096 


512 




OutFrom Set 


InFrom CSet, 


OutFrom Set 












OutFrom Set 




SPPrivateKey-Out 


1 4096 


512 




Hidden 


InFrom Set, 


Hidden 












Hidden 




SPPublicKey-ln 


1 4096 


512 




OutFrom Set 


InFrom Cset 


OutFrom Set 


SPPrivateKey-ln 


1 4096 


512 




Hidden 


InFrom CSet, 


Hidden 












Hidden 




SPSymKey 


1 1024 


128 




Hidden 


InFrom CSet, 


Hidden 












Hidden 




SPNonce 


1 2048 


256 


avoid replay 


In | Out from 


1 In | Out from 


j In | Out from Set 








attacks 


Set 


|set 


1 


SPAuthSource (Internal | External | 


1 2 


0.25 




Not Applicable 


Not Applicable 


Not Applicable 


Special) 














SPDataWriteMode (Write Once | 


1 2 


0.25 




InFrom Set 


InFrom Set 


WriteAny 


WriteOver | WriteAny) 














oruaiarceaunnoue ^rceauirur | 




n or 










rveauMny | niuuenj 














SPDataEncrvot (YES 1 NO) 


1 1 


0.125 




InFrom Spt 


InFrom Set 

II 1 1 1 Wl II uol 


InFrom Set 

llll IUIII Wwl 


SPStartTime 


1 128 


16 




InFrom Set 


InFrom Set 


InFrom Set 


SPEndTime 


1 128 


16 




InFrom Spt 

II II 1 wl 1 1 L 


InFrom Set 


InFrom Set 


SPEraseAtExpiration (YES | NO) 


1 1 


0.125 




InFrom Set 


InFrom Set 


InFrom Set 


SPNumberofRecords 


1 64 


8 




InFrom Set 


InFrom Set 


InFrom Set 


SPRecordSize 


1 64 


8 




InFrom Set 


InFrom Set 


min 3270 


SPCurrentRecord 


1 64 


8 




InFrom Set 


InFrom Set 


-1 


SPDataStart (an absolute disk 


1 768 


96 




Hidden 


Hidden 


Hidden 


address) 














SPAuthority SPName (reader, 


64 32 


256 


First Byte 


InFrom Set 


InFrom Set 


(1,1,1,1,1,1,..) 


writer, admin, encrypted passcode, 






Encodes 








certlN. certOutl* 






REQUIRES 








Total Bytes in One Auth Record 


21,096 


2,889 










Rounded Up 




3,072 


6 


Disk Blocks 






SPData (the disk address for this is 


SPRecSize 


193,536 is 


Other 








usually not contiguous with the 


* NumRecs 


3,072*63 


Authorities 








authority record). 




for the 


will have 












Root Data 


other Sizes 









Authority Source (See AuthSet Call) 
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rieid 


Bits 


Bytes 


Example 


Notes 




SPMagic 


32 


4 


XF27F 






SPOffset 


32 


4 


1844 


header size may increase by 












more than one disk heain-end 












storagelimit item 




SPVpr^inn 


32 


4 


1.01 


text 




SPCryptoSuite 


128 


16 


RSA+RAJ 


text 


Fixed in the Preferred 






D++ 




uuuuii i let ii 


SPVendor 


128 


16 


Foobar 


text 










Corp. 






SPNumAuths 


32 


4 


64 






SPAuthSize 


32 


4 


6 


In 512 Byte Blocks 




SPRootPublicKeyln 


4096 


512 






From Root Auth Record 


SPRootNonce 


2048 


256 






Synthesized on demand 


SPStorageLimits 


8192 


1024 




Begin/End Absolute Disk 
Locations 


Synthesized from Auth 
Records 



Note: Authority Partition Header is typically not writeable. 
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Call 




Arguments Notes 




Calls that Read and Write Authority Records 


SPAuthHeader 


AuthHeader Returns Header 




SPSet 


Name 


Passcode Cert IN CertOut Auth Record View | Modify | Add | Sets values for an authority 


requires 






Delete 


Admin 








priviledge 


SPCSet 


Name 


Passcode CertIN CertOut Auth Record View | Modify | Add | Secure Setting of values for 


requires 






Delete authority, utilizes public key 


Admin 








priviledge 


Calls that permit conventional Read and Write of Authority Data Records 


SPOpen 


Name 


Passcode CertIN CertOut Auth Record Duration in Opens an SDpartition for 






Microseconds authorized read and write 




SPCiose 


Name 


Passcode CertIN CertOut AuthRecord Closes an Sdpartition for 








authorized read and write 




Calls that utilize SP's ability to hide secrets and hide basic cryptography 


SPSignThis 


Name 


Passcode CertIN CertOut DatatoSign PrivateKeyLocation SignedData(returned) 




SPCheckThis 


Name 


Passcode CertIN CertOut DatatoCheck PrivateKeylocation Check(returned) 




SPProtRead 


Name 


Passcode CertIN CertOut Data (returned) MyPublicKey Location 




SPProtWrite 


Name 


Passcode CertIN CertOut Data MyPublicKey Location Location 


SPSuccess 








(returned) 


SPHashThis 


Name 


Passcode CertIN CertOut DatatoHash Hash (returned) Location to Store 





Note.: Locations above are possibly complex in that they can specify other authority records that this authority has the right to 
read or write. So the location may be Name:RecordNumber, in general. 



# # 
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Error 


Code 


Notes 


SPSuccess 


0 




SPBad CertificateIN 


1 


Certificate In Failure 


SPBad CertificateOUT 


2 


Certificate Out Failure 


SPBad Name 


3 


Name not found 


SPBad Passcode 


4 


Passcode failed 


SPNo PublicKey-Out 


5 


For External Authority 


SPNo Publickey-ln 


6 


For External Authority 


SPNo PrivateKey-Out 


7 


For External Authority 


SPNo PrivateKev-ln 


8 


For External Authority 


SPNoAuthority 


9 


You can't do this 


SPPartition Full 


10 


The SP Partition is Full and writeover is not turned on 


SPNo Space For Partition 


11 


You can't create this partition, no contiguous space 


SPNo Security Support 


12 


SP Security Turned off on this device - Header Fail 


SPRead Failure 


13 


Special SP Read Failed 


SPWrite Failure 


14 


Special SP Write Failed 



